PYSEC-2021-860

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/asterix-decoder/PYSEC-2021-860.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2021-860

Aliases

Published

2021-11-22T21:15:00Z

Modified

2024-04-10T18:58:42.076069Z

Summary

[none]

Details

Croatia Control Asterix 2.8.1 (python_v0.7.2) has a heap-based buffer over-read, with additional details to be disclosed at a later date.

References

Affected packages

PyPI / asterix-decoder

Package

Name: asterix-decoder; View open source insights on deps.dev
Purl: pkg:pypi/asterix-decoder

Affected ranges

Type: GIT
Repo: https://github.com/croatiacontrolltd/asterix
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

3f765d387d239ccc44e278a2ffa600fb6a6587f9

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.7.2

Affected versions

0.*

0.1.0

0.2.0

0.3.0

0.4.0

0.4.1

0.4.2

0.5.0

0.5.1

0.5.2

0.5.5

0.5.6

0.5.7

0.5.8

0.5.9

0.5.10

0.5.11

0.5.12

0.5.13

0.5.14

0.5.15

0.5.16

0.6.0

0.6.1

0.7.0

0.7.1

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/asterix-decoder/PYSEC-2021-860.yaml"